A commodity trader based in London has already contracted to pay a supplier. The payment instruction is ready. Then the compliance team flags a match on the UK financial sanctions Consolidated List (the list of designated persons maintained under the Sanctions and Anti-Money Laundering Act, known as SAMLA). The transaction is now frozen. The question is not whether to comply – that is settled – but how to obtain authorisation to release the payment lawfully and promptly, before commercial damage compounds.
Payment authorisations under the Office of Financial Sanctions Implementation (OFSI) are case-by-case licences permitting an otherwise prohibited financial transfer to proceed under defined conditions. They are issued under SAMLA and the relevant thematic sanctions regulations. As of June 2026, the absence of a statutory decision deadline means processing times vary considerably, and applicants who submit incomplete or poorly evidenced applications routinely face extended delays.
This guide walks through the procedure step by step, flags the most common errors, and maps how OFSI's approach compares with OFAC and EU licensing so that cross-border businesses can calibrate their strategy from the outset.
What is an OFSI payment authorisation and when do you need one?
An OFSI payment authorisation is a specific licence (a case-by-case permission to undertake an otherwise prohibited transaction) that enables a person subject to UK jurisdiction to make, receive, or process a financial transfer involving a designated person or an entity owned or controlled by one. The prohibition that triggers the need for a licence is broad: any dealing with funds or economic resources that are owned, held, or controlled by a designated person is frozen unless a licence expressly permits it.
The trigger is not limited to direct payments to the designated person. It extends to any transaction in which a designated person has an interest – for instance, a payment routed through a correspondent account at a bank with a blocked beneficial interest, or a commercial settlement where the ultimate recipient is an entity that a designated person controls. Ownership and control are assessed by reference to the relevant thematic regulations and OFSI's published guidance.
Who needs to apply? The obligation falls on the person who would otherwise commit the prohibited act. That is typically the payer's bank, but the underlying business customer often leads the application in practice – particularly where the commercial facts sit with the customer rather than the financial institution. In our experience, payment authorisations are most frequently sought by banks and payment firms, commodities traders, professional-services firms collecting fees, and insolvency practitioners administering estates that include frozen accounts.
Not every payment touching a sanctions-affected party requires a separate licence. OFSI issues general licences (standing authorisations permitting a defined category of transactions without a separate application) for certain categories of payment – for example, basic needs expenditure or legal fees up to defined amounts. Before preparing a specific-licence application, a careful review of current general licences is essential. Applying specifically for a category that a general licence already covers wastes time and may signal to OFSI that the applicant's compliance function has not conducted basic due diligence.
The position above covers the standard case. Your facts – the counterparty's designation status, the route of funds, the contractual structure – change the analysis materially.
For an initial assessment of whether a general licence covers your payment or whether a specific application is required, contact Calder & Vance at info@caldervance.com.
Step 1 – Establishing the legal basis for the application
Before drafting a single line of the application, the applicant must identify the licensing ground that OFSI is being asked to apply. Each ground has its own evidential requirements, and submitting under the wrong ground is one of the most common causes of refusal or lengthy clarification rounds.
OFSI's licensing grounds are set out in the relevant thematic regulations and include: humanitarian activity; basic needs of a designated person or their dependants; legal fees and legal representation costs; certain ongoing contractual obligations pre-dating the designation; and regulatory or supervisory functions. There are others, and the applicable grounds differ between the Russia, Belarus, Iran, and other thematic programmes. The first task is to map the factual scenario to the correct programme and then to the correct ground within that programme.
Two questions sharpen that mapping exercise. First: when was the contract formed relative to the date of designation? Pre-designation contracts attract specific grounds not available to post-designation obligations. Second: what is the purpose of the payment – is it a commercial settlement, a debt repayment, a fee, or an operational cost? Purpose determines the evidential package. Confusing these at the start means reconstructing the application under a different ground later, sometimes after OFSI has asked for it.
Our practice regularly identifies mischaracterised grounds at the draft stage. Correcting early is far less costly than addressing a request for information from OFSI mid-review.
Step 2 – Assembling the evidence package
A well-built evidence package is the single greatest determinant of processing speed. OFSI expects an application to be self-contained: the decision-maker should not need to chase the applicant for core documents. Incomplete submissions are a primary cause of delay.
The minimum package for a payment authorisation typically includes: full identification of the applicant and any third parties to the transaction; identification of the designated person or the entity owned or controlled by them (with reference to the Consolidated List entry); a clear explanation of the payment – amount, currency, purpose, and the legal or contractual basis; supporting documents (the contract, invoice, or court order that underpins the payment); evidence of the designated person's interest in the funds (ownership structure, beneficial-interest analysis, or corporate documentation); a statement of the licensing ground relied upon; and confirmation that no other unlicensed transaction is proposed alongside the licensed payment.
Ownership analysis deserves particular attention. Where the counterparty is not itself designated but is alleged to be owned or controlled by a designated person, the applicant must demonstrate the chain of ownership or control clearly. OFSI applies an ownership and control test under the relevant thematic regulations. The UK test turns on both ownership and control, unlike the OFAC test which is purely mechanical at 50 percent or more aggregate ownership. That distinction matters: a payment that would be clearly prohibited under OFAC because a blocked person owns 51 percent of the counterparty may sit in a different evidential category under OFSI if the ownership structure is layered and control is contested. An applicant who simply copies across an OFAC analysis risks submitting an incomplete picture to OFSI.
Format matters too. Applications submitted as dense, unstructured PDFs without a summary cover letter consistently generate more information requests than those with a structured submission document, clearly numbered exhibits, and an upfront narrative of the factual and legal position.
Step 3 – Submitting the application and managing OFSI's review
OFSI applications are submitted via the UK government's online licensing portal. The submission must be made in English. Supporting documents in other languages require certified translations. The portal generates a case reference; applicants should note this and use it in all correspondence, as OFSI tracks matters by case reference rather than by counterparty name.
What happens after submission? OFSI will conduct an initial completeness check. An incomplete application may be returned promptly with a list of required items – this is not a refusal, but it does restart the clock. Once accepted as complete, the application enters the substantive review queue. OFSI may issue a request for information (RFI) seeking additional documents or clarification. Failing to respond to an RFI promptly – or providing a partial response – extends the review period significantly. In our experience, responding to RFIs within five business days of receipt, with a structured, exhibit-by-exhibit response, is the single most effective way to keep the matter moving.
There is no statutory deadline by which OFSI must decide a specific-licence application. Processing times vary by programme and by the complexity of the application. Applications in certain high-volume programmes can take longer than those in less congested ones. Applicants should not assume that silence means approval. If a commercial deadline is approaching, it is appropriate to notify OFSI of the urgency in a brief covering communication at the outset – but urgency must be demonstrated, not merely asserted.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact us at info@caldervance.com for a confidential assessment.
How does OFSI's process compare with OFAC and the EU?
Cross-border businesses almost always face more than one sanctions regime simultaneously, and the procedural divergences between OFSI, OFAC, and the EU have direct practical consequences for the design of a multi-regime licence strategy.
Under OFAC, the standard for a specific licence (OFAC's term for a case-by-case authorisation) is broadly similar in purpose to an OFSI specific licence, but the process runs through a different portal, and OFAC operates a statutory framework under IEEPA and the relevant programme regulations. OFAC's processing times are similarly variable, and its published guidance on submitting complete applications – covering the transaction description, the parties, and the requested authorisation – closely parallels OFSI's expectations. One critical difference: OFAC maintains a broader suite of general licences than OFSI for most of its programmes, which means that a category requiring a specific OFSI application may already fall within an OFAC general licence. Practitioners advising on multi-regime payment authorisations must check both sets of general licences before recommending an application strategy.
EU licensing operates through the competent authorities of individual EU member states – there is no single EU-wide licence application portal. A payment that involves a party in Germany, a contract governed by French law, and an applicant registered in the Netherlands may require separate consideration of which competent authority has jurisdiction. The substantive test across EU member states is set by the relevant Council regulation, but procedural rules and processing times differ by jurisdiction. Our cross-border practice regularly advises on which competent authority has jurisdiction and how to structure the application accordingly.
Switzerland, through SECO, operates its own licensing process for payments touching counterparties subject to Swiss autonomous sanctions. For businesses with Swiss accounts, Swiss branches, or Swiss-law contracts, SECO authorisation may be required in parallel with OFSI. See our guide on payment authorisations under the Swiss autonomous sanctions regime for a step-by-step overview of the SECO process.
A common misconception in cross-border transactions is that obtaining one regime's authorisation is sufficient. It is not. Each regime operates independently. A payment licensed by OFSI remains prohibited under OFAC unless OFAC has separately authorised it, and vice versa. The stricter prohibition governs in practice: if any regime applicable to a party in the transaction chain prohibits the payment without a licence, that prohibition must be addressed regardless of what another regime permits.
What are the most common pitfalls in OFSI payment authorisations?
Most application failures trace to a small number of recurring errors, which our compliance counsel see regularly across the range of clients who approach us after a first submission has stalled.
The first is misidentifying the licensing ground. Applicants often select the ground most familiar to them – typically "prior contractual obligation" – without checking whether the designation predated the contract or whether the transaction actually fits the description of that ground. OFSI will not simply redirect a wrongly filed application to the correct ground; it will request clarification, extending the review.
The second is insufficient ownership analysis. Where the designated person holds an indirect interest in the payee, applicants frequently provide the top-level corporate structure without tracing the chain through intermediate holding companies. OFSI's ownership and control assessment requires the full chain. An incomplete analysis raises questions about whether the applicant has conducted adequate due diligence – which can itself be a compliance concern.
The third is failing to address general licences first. Submitting a specific-licence application for a category of payment already covered by a general licence wastes applicant resource and creates unnecessary review load. It can also prompt OFSI to question why the applicant was unaware of the general licence.
The fourth pitfall is commercial pressure driving premature submission. Under pressure to release a payment by a contractual deadline, compliance teams sometimes submit an application before the evidence package is complete. A returned or stalled application causes more delay than a slightly later, complete submission. Speed in preparation is desirable; speed at the cost of completeness is counterproductive.
Fifth: no parallel contingency planning. What happens if OFSI refuses or takes longer than expected? Businesses should consider contract force-majeure provisions, the availability of novation or assignment to a non-designated party, and whether any interim relief is appropriate – all from a compliance standpoint, not as a route around the sanctions. Compliance counsel can assist in identifying lawful options if the authorisation is delayed.
A myth worth addressing directly: some businesses assume that if their bank processes the payment first and seeks authorisation retrospectively, they have limited their own exposure. This is incorrect. Processing a prohibited payment without a licence is a potential breach by both the financial institution and the underlying party. Retrospective applications do not cure a prior breach; they may be relevant to a voluntary self-disclosure assessment, but the violation is not erased. Counsel should be involved before the payment moves, not after.
What reporting and record-keeping obligations follow an OFSI licence?
A granted OFSI licence does not close the compliance file. Conditions attach, and post-licence obligations can be just as significant as the application process itself.
Licences routinely include reporting conditions requiring the licensee to notify OFSI within a defined period of the payment being made, to confirm that the payment was made in strict accordance with the licence terms, and in some cases to provide transaction documentation. Failure to comply with licence conditions is itself a potential breach of the sanctions regulations – separate from and additional to any liability for the underlying transaction.
Record-keeping obligations also arise under SAMLA and the relevant thematic regulations. Parties who are subject to OFSI's regime and who deal with designated persons or frozen assets must maintain adequate records of those dealings. The standard expected is that records are sufficient to demonstrate compliance if OFSI were to conduct a review. In our practice, we advise clients to treat licence-related records as a distinct category within their sanctions-compliance record-keeping programme, with clear document management and retention protocols.
For financial institutions, there is a parallel reporting obligation: where a firm has reason to suspect that a person is a designated person, or that a breach has occurred, there is a statutory obligation to report to OFSI. That obligation operates independently of whether the firm has applied for or holds a licence. Banks and payment processors that obtain a licence for a customer payment should still assess whether a separate suspicious-transaction report is warranted under applicable financial-crime rules.
Operators working across jurisdictions should also be aware that parallel reporting obligations may exist under other regimes – OFAC's blocked-property reporting requirements, and similar provisions in EU member-state implementations of Council regulations. Those obligations run on different timelines and have different addressees. A coordinated approach to post-authorisation reporting, covering all applicable regimes, is the only reliable way to close the compliance loop.
Related practices
- Frozen account management under BIS and the EAR – practical counsel on managing frozen accounts under US export-control and sanctions rules
- Payment authorisations under OFSI: advanced topics – deeper analysis of contested ownership, RFI management, and licence conditions